$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft File: kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft (raw, json) Hash identifier: /OP1C38huu2gCi2SG/gKuaxjH2+/a7PUy0IDIXtD3qE= Subject key identifier: 36:51:B3:24:F9:A8:6B:A5:6C:60:70:9F:80:1E:6B:FF:78:D8:D2:14 Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Certificate serial: 29DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft Manifest number: 28DD Signing time: Thu 16 Apr 2026 15:36:21 +0000 Manifest this update: Thu 16 Apr 2026 15:36:20 +0000 Manifest next update: Thu 23 Apr 2026 15:36:20 +0000 Files and hashes: 1: kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl (hash: 6iENkEomZDQv1hAKsRYFPCHT6Sie8pggqW7zSiuqSPI=) 2: 4971496EAE1B11EF8FFE0422C4F9AE02.roa (hash: OCIUxyS/b5tLlrfDuZU5t1QbT6abuQsHqTZkHSU5t1M=) 3: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (hash: b0UCq+eUPG0Zw3G9HvUdvsx8LonrZenua0MeaBXzxdI=) 4: C6FF76A0000C11F1BBD3B1413E6F56BC.roa (hash: Vmx4U8sYtrtvs8ITU+lcZl+6PgMDKzh+1nwm+4PN1nI=) 5: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (hash: nWS9s+HK5wPDrPuEICFs+8KocJdOwtwcQLtIUKC+IaA=) 6: 45163F62D61E11EEB0DF364BC4F9AE02.roa (hash: egN1g3VmLDqnrfKYkekF1hIKzthJeO8aMjScFqOjh/k=) 7: BD3FF814A49811EEAD789D2AC4F9AE02.roa (hash: Q8fywLVcYI72bpER/jVkoIMpEUoDOPdG+CfgHKA2VuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10718 (0x29de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Validity Not Before: Apr 16 15:36:20 2026 GMT Not After : Apr 23 15:36:20 2026 GMT Subject: CN=69e101f5-ce38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b8:6f:89:22:56:cb:18:5b:b8:17:1a:a1:f1: 0f:18:22:9a:59:27:ea:e3:0b:bc:eb:6b:39:6f:e1: 64:a0:4d:5a:9a:47:72:d7:ee:44:a4:63:26:fa:23: 03:c4:8a:a0:ff:7f:e9:cb:29:bf:18:5a:a1:c5:81: 7b:04:d5:7e:15:b0:9b:d3:cd:54:f2:fe:11:dc:39: 07:2f:6b:6f:1b:93:e9:93:c3:72:aa:e3:bd:b3:09: 15:df:fa:98:19:f4:94:c0:c8:1a:34:7c:72:36:c3: 73:f0:78:ac:dc:85:65:a1:0c:e0:69:5a:9d:e2:43: 8a:2f:68:97:7e:62:6b:bc:de:ad:9e:60:36:1c:37: ce:22:08:b4:69:06:4c:1b:55:53:f5:80:f9:cb:cc: 9f:c6:92:c0:7d:48:81:ca:46:48:00:77:d6:e9:5d: bd:00:11:7e:10:fb:d0:33:74:72:9f:68:a0:75:ec: 75:e8:a5:50:a2:dc:a6:b5:db:f1:41:54:88:25:a8: a2:ab:04:41:09:25:5a:44:82:46:b8:15:f9:48:a0: b6:b9:fb:f9:dd:bc:15:71:ba:f7:e0:12:8a:56:d8: 77:94:e1:b9:a9:1e:a3:50:dd:1f:69:68:ca:b6:0c: db:f9:46:fa:09:e7:ff:c5:14:b4:0e:f0:3a:87:f8: 79:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:51:B3:24:F9:A8:6B:A5:6C:60:70:9F:80:1E:6B:FF:78:D8:D2:14 X509v3 Authority Key Identifier: keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:a9:ed:bd:fb:1a:5a:54:81:10:24:32:0c:34:70:1c:d0:d2: 98:57:8c:ac:40:34:bc:01:03:1a:24:06:07:ff:b6:1c:33:39: 8e:fd:2e:22:76:5e:73:fc:3b:57:a9:3b:44:54:2c:a9:b1:8a: b4:88:96:89:34:2b:51:ca:b7:a1:1d:1c:33:83:02:1a:88:b1: b8:62:b2:3e:ec:c2:33:e4:62:2b:23:c9:0c:9f:e6:60:13:8c: ee:5e:84:69:bd:7e:4b:95:39:d6:ce:ea:2d:21:aa:b3:96:f0: bc:7b:16:f5:b1:f6:be:d4:14:c8:3f:ee:74:62:b0:1e:57:be: 6e:b2:d6:d3:23:0d:19:7d:03:6e:98:11:35:5c:48:d9:6f:b5: 8e:fe:1f:c2:06:ac:a5:20:93:21:73:9e:e6:71:16:ac:60:09: 05:31:aa:7c:88:3a:e1:4b:3f:8e:6a:b7:f8:a2:41:eb:df:95: 2d:cd:13:c0:65:1e:f1:89:1e:cd:97:58:2f:61:3b:72:87:5b: 9f:a1:0f:2c:fe:18:30:fe:0a:50:9e:42:9a:9b:dd:57:5b:6f: 4a:80:f2:f3:f4:11:39:0f:2e:1c:4f:1f:bd:b8:1c:a4:6c:4f: 5a:73:d1:fc:df:e9:c2:e2:1c:6c:9d:ae:44:1e:e4:82:ea:d6: 5d:ea:ba:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKDkwMDlFNzQxOTZENDhCMDM5NjRGMUZDNTZDRkU0NDZF QzUwNDhDRjcwHhcNMjYwNDE2MTUzNjIwWhcNMjYwNDIzMTUzNjIwWjAYMRYwFAYD VQQDEw02OWUxMDFmNS1jZTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrhviSJWyxhbuBcaofEPGCKaWSfq4wu862s5b+FkoE1amkdy1+5EpGMm+iMD xIqg/3/pyym/GFqhxYF7BNV+FbCb081U8v4R3DkHL2tvG5Ppk8NyquO9swkV3/qY GfSUwMgaNHxyNsNz8His3IVloQzgaVqd4kOKL2iXfmJrvN6tnmA2HDfOIgi0aQZM G1VT9YD5y8yfxpLAfUiBykZIAHfW6V29ABF+EPvQM3Ryn2igdex16KVQotymtdvx QVSIJaiiqwRBCSVaRIJGuBX5SKC2ufv53bwVcbr34BKKVth3lOG5qR6jUN0faWjK tgzb+Ub6Cef/xRS0DvA6h/h5QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZRsyT5 qGulbGBwn4Aea/942NIUMB8GA1UdIwQYMBaAFJAJ50GW1IsDlk8fxWz+RG7FBIz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni9CQzFEQzFGNkMx NzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3T1dUeF9GYlA1RWJzVUVq UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tBbm5RWmJVaXdPV1R4X0ZiUDVFYnNVRWpQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni9CQzFEQzFGNkMxNzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3 T1dUeF9GYlA1RWJzVUVqUGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIantvfsaWlSBECQyDDRwHNDSmFeMrEA0vAEDGiQGB/+2HDM5jv0uInZec/w7 V6k7RFQsqbGKtIiWiTQrUcq3oR0cM4MCGoixuGKyPuzCM+RiKyPJDJ/mYBOM7l6E ab1+S5U51s7qLSGqs5bwvHsW9bH2vtQUyD/udGKwHle+brLW0yMNGX0DbpgRNVxI 2W+1jv4fwgaspSCTIXOe5nEWrGAJBTGqfIg64Us/jmq3+KJB69+VLc0TwGUe8Yke zZdYL2E7codbn6EPLP4YMP4KUJ5CmpvdV1tvSoDy8/QROQ8uHE8fvbgcpGxPWnPR /N/pwuIcbJ2uRB7kgurWXeq6RA== -----END CERTIFICATE-----Generated at Fri Apr 17 08:08:34 2026 by rpki-client